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SYSTEM FOR DELIVERING CUSTOMIZED INFORMATION 
Eric L. Schwartz 
Daniel M. Schwartz 

5 BACKGROUND OF THE INVENTION 
Field of the Invention 

The present invention relates generally to global - 
area computer networks and, more particularly, to 
delivering information over global-area computer 
10 networks. 

Related Art 

Current methods of delivering user-specific 
information present several limitations. For example, 
in the doctor-patient context, health care information 

15 is delivered mainly by the physician communicating 

orally with the patient. Usually, this occurs during an 
office visit and is sometimes supplemented by a phone 
conversation. Because of the ongoing daily requirements 
necessary to manage a chronic disease such as asthma or 

20 diabetes, more frequent and customized patient 

education is desirable to ensure patients optimally 
manage their condition (s) . 

To manage a chronic disease such as diabetes 
mellitus patients must understand the multiple 

25 components of daily care of this condition. These 
would include blood sugar monitoring, nutrition, 
exercise, and foot inspection, for example. 
Unfortunately, most patients with diabetes have an 
incomplete understanding of how to manage the disease 

30 and thus succumb unnecessarily to disabling diabetic 
complications . 

While instructions for daily care are often 
imparted during physician visits, a substantial number 
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of patients have trouble retaining these patient care 
instructions. In addition, some patients are reluctant 
to ask the physician questions even though they may not 
have completely understood the physician's 
5 instructions. 

Furthermore, patient care instructions are often 
given all at once and do not necessarily address the 
real-time medical needs of each patient as they arise. 
Therefore, it would be desirable to be able to deliver 

10 patient care information to patients that is based on 
their real-time medical needs and that is conveniently 
accessible by the patient. 

The Internet provides an ideal medium for 
delivering information on an (almost) continuously and 

15 easily accessible platform. Computer applications for 
delivering medical information over the Internet have 
been developed. For example, websites such as WebMD 
(http://www.webmd.com) and Dr. Koop 
(http://www.drkoop.com) provide general healthcare 

20 related information to healthcare professionals, as 
well as consumers. These websites allow consumers to 
obtain information about various diseases and 
recommended therapies to treat the diseases. In 
addition, these websites provide links to related e- 

25 commerce sites such as physician referral services, on- 
line drugstores, pharmacies, healthcare clinics and 
similar organizations. Finally, consumers can enter an 
electronic health profile that allows them to track 
their own healthcare data and transmit it 

3 0 electronically to healthcare professionals subscribing 
to .a related service. 

However, none of these websites allows for 
physician-directed real-time delivery of patient 
specific information. As a result, these websites do 
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not provide a convenient platform for ongoing care for 
chronic disease patients. In addition, these websites 
require the patient to select which information he/she 
wants to access. Thus, if the patient is not aware of 
5 the availability of a certain piece of information on 
one of these websites, or more commonly, does not know 
exactly which information to access at the site, it is 
unlikely that the patient would be able to gain access 
to such information. 

10 Furthermore, patients are sometimes reluctant to 

search for medical information on the Internet due to 
security concerns. This is due to the fact that a 
computer's IP address can be easily used to remotely 
gain access to the file system of that computer. This 

15 is of particular concern for patients suffering from 
ailments that they do not wish to disclose to the 
public. In addition, several Internet sites currently 
keep track of visitors to their sites and later use 
that data for marketing purposes. As a result, 

20 patients are often concerned that using the Internet to 
research their ailments may result in the involuntary 
disclosure of confidential medical information. 

The need for customized information also arises in 
the context of providing technical support to 

25 consumers. The increasing complexity of computers, and 
even consumer electronics, is making it increasingly 
difficult for consumers to correctly operate or repair 
their computers/appliances. Manufacturers typically 
provide technical support in the form of a telephone 

30 customer service line. This approach has the 

significant shortcoming that the consumer must verbally 
describe to the technical support representative the 
problem the user is trying to solve. Furthermore, the 
consumer may have difficulty following the technical 
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support representative's directions, adding further 
complexity to the process. Since consumers typically 
lack the expertise to analyze the operation of their 
computer/ appliance, this process is difficult. 
5 Manufacturers may also provide technical assistance 
through websites. The problem with this approach is 
that while multimedia content can be delivered to the 
user's computer, no human interaction is provided 
through the website. At best, the consumer may be able 

10 to send an email message to the technical support 
center's staff and wait for a reply. 

Yet another potential application that requires 
secure delivery of customized information over a 
computer network is the protection of intellectual 

15 property rights in music recordings transferred over 
the Internet. While existing technology allows the 
transfer of digitally encoded sound recordings (e.g. 
MP3 files) among computers connected to the Internet, 
record companies are extremely concerned with the ease 

20 with which these recordings can be illegally copied 
over such medium. 

There is thus a need for an improved method for 
delivering information that overcomes the limitations 
of the prior art discussed above. 

25 SUMMARY OF THE INVENTION 

The system and method of the present invention 
allow convenient and easy yet secure access to 
customized information. Examples of customized 
information are patient care information tailored to 

30 individual patients' medical records and treatment 
plans, technical support information based on 
diagnostic data obtained from the user computer and 
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digitally encoded sound recordings encrypted using the 
user's key. 

This is accomplished by storing user-specific 
information on a server computer connected to a global - 
5 area computer network and allowing users (e.g., 

patients and/or healthcare professionals) to access the 
user's information on-line through a client computer 
also connected to the global-area computer network. To 
facilitate secure personalized and efficient delivery 

10 of this information, a support library is supplied to 
individual users on a computer-readable storage medium 
such as a CD-ROM or DVD. The information retrieved 
from the server computer, in such cases, is processed 
to display instructional materials to the user by 

15 employing the support library stored on the computer- 
readable storage medium. As a result, the amount of 
information transferred over the global -area network is 
drastically reduced, allowing for optimal performance 
even over a low bandwidth network connection. 

20 In some embodiments, the user specific information 

includes references to graphic illustrations and/or 
animations as instructional materials (e.g., treatment 
procedures) . To safeguard the privacy- of the user's 
information (e.g., patients' medical records), the 

25 information stored on the server computer is protected 
by encryption and by security identification and access 
procedures to provide access only to authorized users 
of the computer system. 

This approach overcomes the limitations of the 

30 prior art described above. For example, in the case of 
medical information the most relevant information 
concerning the patient's condition is made easily 
accessible to the patient since the information is 
delivered based on the patient's own data. In 
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addition, the encryption identification and access 
scheme ensures the confidentiality of the patient's 
information. In the case of technical support, the 
user is provided with technical assistance based on 
5 diagnostic information obtained directly from the 

user's computer, eliminating the need for the user to 
describe the technical problem he/she is experiencing. 
In the case of digitally encoded sound recordings, 
intellectual property rights are protected by allowing 

10 only authorized users to access recordings transferred 
over the Internet and by embedding user- identifying 
information into the recording itself. 

Finally, some embodiments provide additional 
features such as anonymous directed advertising and 

15 anonymous Internet Service Provider (ISP) services. 
These features allow patients to use the Internet to 
obtain information about their illnesses without 
risking unauthorized disclosure of confidential medical 
information. 

20 BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a block diagram of a computer system, in 
accordance with an embodiment of the invention, 

FIG. 2A is a block diagram of the 
hardware/software structure of the client computers of 
25 FIG. 1. 

FIG. 2B is a block diagram of the 
hardware/ software structure of the server computer of 
FIG. 1. 

FIG. 3A is a flow diagram of the operation of a 
30 client computer of FIG. 1, in accordance with an 
embodiment of the invention. 
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DETAILED DESCRIPTION OF THE INVENTION 

A computer system 100, according to an embodiment 
of the invention is shown in FIG. 1. Computer system 
100 includes a server computer 110 and a plurality of 
5 client computers 120n (where n = A, B, C, D, etc.) 

connected via global-area network (e.g., the Internet) 
130 . 

FIG. 2A illustrates the hardware/ software 
structure of a client computer 12 On. During operation 
10 of computer system 100, a client computer program 210 
is executed on top of operating system 220, which in 
turn controls hardware layer 230. Hardware layer 23 0, 
in turn, provides a physical connection to global-area 
network 130. 

15 FIG. 2B illustrates the hardware/ software 

structure of server computer 110 . During operation of 
computer system ICQ, server computer program 240 is 
executed on top of operating system 250, which in turn 
controls hardware layer 260. Hardware layer 260, in 

20 turn, provides a physical connection to global-area 

network 130. Server computer program 240 also stores 
and retrieves information in database 270 via operating 
system 250. Database 270 stores patients' medical 
records, as well as treatment procedures and 

25 educational materials tailored to individual patients' 
needs. A treating physician may include individualized 
instructions for specific patients that are added to 
existing educational materials. Alternatively, the 
physician may specify an entirely new course of 

30 treatment uniquely tailored to a specific patient's 
requirements. This allows for very specific 
information to be made available to patients in an 
easily accessible form that can be consulted at will by 
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the patient. For example, the patient may want to 
review an educational video or animation of how to 
perform a treatment procedure to guide him through the 
process. Rather than having to rely on his/her own 
5 recollection of the physician's instructions conveyed 
during an office visit, or on a standardized 
instructions sheet, the patient , using the system of 
the present invention, is able to access on-line a 
comprehensive set of educational materials that are 

10 tailored to his/her specific treatment options. To 
improve speed, in some embodiments, a library of 
educational materials is provided to the user in the 
form of a computer- readable storage medium such as a 
CD-ROM or DVD. In such embodiments, rather than 

15 delivering all the educational materials from the 

server, only a set of instructions is accessed on-line. 
These instructions reference specific educational 
materials that are then generated and displayed from 
the support library stored on the patient's computer- 

20 readable storage medium. As a result, the amount of 
information that needs to be retrieved on-line is 
greatly reduced, and the ability to provide customized 
user instruction is preserved. 

FIG. 3A is a flow diagram of the operation of a 

25 client computer 120n, in accordance with an embodiment 
of the invention. First, in stage 305, client computer 
120n requests patient information from server computer 
110 in response to input from a user. In stage 310, 
the client computer receives encrypted patient 

30 information from server computer 110. This information 
may include the patient's medical history, a last visit 
report or physician's care instructions, for example. 
Information transmitted froiff the physician's office to 
server computer 110 is encrypted using a physician's 
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key, while information transmitted from server computer 
110 to a client computer 120n is encrypted using a 
patient' s key, so as to ensure the confidentiality of 
the information transmitted over global-area computer 
5 network 130, In some embodiments, server computer 110 
decrypts information received from the physician's 
office and re-encrypts this information with the 
patient's key. The encrypted information is then 
decrypted in stage 315. In stage 320, a client 

10 computer program executed on client computer 12 On 

generates patient care educational materials based on 
the patient information received from server computer 
110. Finally, in stage 325, the educational materials 
are presented to the user. In some embodiments, these 

15 materials are presented to the user by a graphical 

display such as the one shown in FIG. 4, as described 
below. 

FIG. 3B is a flow diagram of the operation of 
server computer 110, in accordance with an embodiment 

20 of the invention. First, in stage 350, server computer 
110 receives a request for patient information from a 
client computer 12 On. In stage 355, server computer 
110 queries database 270 to retrieve patient 
information for the requested patient (e.g. a list of 

25 instructional materials customized for the patient' s 

condition) . Stage 360 then determines whether matching 
records are found in database 270. If no matching 
records are found in database 270, an appropriate error 
code is transmitted to client computer 12 On, in stage 

30 365. As those skilled in the art understand that 
error-handling operations can be performed using a 
variety of techniques known in the art, these 
techniques are not further described herein. In 
optional stage 370, the patient information is 
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encrypted to ensure the confidentiality of the patient 
information transmitted over global -area computer 
network 130. However, in embodiments that do not 
require a secure communication link, stage 370 may be 
5 dispensed with altogether. Finally, the encrypted 
patient information is transmitted to client computer 
12 On via global -area computer network 130, in stage 
375. 

As those skilled in the art will readily realize, 

10 standard communications protocols are followed to 

ensure completion of the data transmission operations 
described above. For example, a send/acknowledge 
mechanism can be employed to detect failures in the 
communications link and retransmit the data in case of 

15 data loss. Of course, other techniques known in the 
art can be used in accordance with the principles of 
the invention. 

FIG. 4A depicts a window 400 shown on a screen of 
a client computer 120n. Window 400, in turn, comprises 

20 a patient specific content pane 410, a reminders pane 
420, a play demonstrations pane 430, advertisement 
messages 440n (where n = A, B, C, ,..) and a 
measurements pane 450, Patient specific content pane 
410 includes educational sections 415n (where n = A, B, 

25 C, ...). Each educational section contains treatment 
educational materials for a specific procedure or set 
of procedures to be performed for the patient. 
Reminders pane 420 contains fields summarizing upcoming 
appointments, lab test and prescriptions for the 

30 patient. The patient may be able to book, confirm or 
change appointments by following appropriate links in 
reminders pane 420. Play demonstrations pane 430 
contains animation buttons 435n and a demonstration 
window 438. When the patient selects an animation 
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button 435n, a corresponding animation is played in 
animation window 438. Advertisement messages 440n, in 
turn, contain advertising information generated based 
on the patient's information. Finally, measurements 
5 pane 450 allows the user to enter measurements obtained 
as a result of the procedures illustrated by the 
educational materials. Exemplary measurements may 
include: body readings such as pulse reading or weight, 
state of being such as how a patient is feeling, 
10 exercise or smoking counts (.e.g. how many minutes did 
you exercise today, how many cigarettes did you smoke 
today) or answers to education test questions , such as 
tests that measure how well a patient knows how to take 
care of him/herself. These measurements allow 
15 educational materials to be interactive and the 

education programs to be responsive to patient input. 

In one embodiment of the invention, animated 
demonstrations are played on play demonstrations pane 
430. Computer code residing on the patient's computer 
20 (e.g., a CD-ROM library) contains complete animated 

demonstrations and component actions that can be used 
to build complete animated demonstrations. Animated 
demonstrations allow a patient to watch a short "movie" 
of an animated person performing movements related to 
25 the patient's treatment. 

Complete animated demonstration's (e.g., a 
demonstration of a diabetic patient taking a blood 
sugar sample) may be provided for demonstrations that 
are common to a wide variety of patients. Component 
30 actions (e.g., the movement of a finger, a head tilt 
forward or raising both knees to the chest, for 
example) may be provided for demonstrations that are 
specific to a particular patient's treatment. The 
component actions can be used as building blocks to 
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generate complete animated demonstrations. Figs. 4b-4D 
illustrate an exemplary animated demonstration of how w 
a diabetic patient , before putting on his shoes, should 
check the insides of his shoes for anything that could 
5 cut his/her feet. Figs. 4B-4D represent sequentially 
captured frames from an AVI animation displayed using a 
standard multimedia player program. 

The following example illustrates a complete 
animated demonstration and the component actions used 

10 to build the demonstration. Suppose, for example, that 
a patient has had pneumatic retinopexy surgery for 
retinal detachment. As part of the post -operative 
treatment, the patient must use eye drops. In addition 
to applying the eye drops, it is important that the 

15 patient positions his head properly to place the 
intravitreal gas bubble on the retinal break (s). 

The eye drop instruction is a complete animated 
demonstration. That is, the entire demonstration is 
stored on the patient's computer (e.g., on a CD-ROM) as 

20 a continuous sequence. The eye drop animation is 
stored as a complete demonstration because there is 
usually no variation in this demonstration from patient 
to patient or situation to situation. However, each 
step in the eye drop sequence can be substituted with a 

25 different component action. Thus, if there was a part 
of the demonstration that was patient specific, that 
part could be replaced by a different component action. 
The computer program running on the patient's computer 
would then play the modified version with the 

30 substituted components. For example, if the physician 
wanted the patient to pull his eye lid down in a 
particular way when inserting the eye drop, the 
computer program, at the direction of the physician, 
would (a) identify the step number in the complete 
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animated demonstration sequence, (b) mark that step for 
replacement, (c) search for the component actions of 
pulling down the eyelid, (d) specify the exact movement 
of eyelid pull, and (e) perform the substitution. 
5 The head positioning, however, is patient and/or 

situation specific. Thus, the head orientation needs 
to be specified. The physician (or a nurse, office 
assistant, technician) can configure the demonstration 
in a demonstration configuration screen by first 

10 specifying the action of a body lying down. Then the 
physician can specify the orientation of the head by 
indicating it on a clock face. If there is an aspect 
of timing involved in the activity, start and stop 
times can be indicated for any part of the 

15 demonstration, as the demonstration proceeds. Once the 
general head position demonstration has been 
configured, it is given a name that references it when 
the physician wants a patient to see that demonstration 
on his computer. 

20 Those skilled in the art realize that information 

can be presented to the user in a layout other than the 
one depicted in FIG. 4. Therefore, the appearance and 
organization of window 400 is merely illustrative in 
nature and not limiting. Different types of 

25 information can be presented to the user, in accordance 
with the principles and spirit of the invention, 
utilizing a variety of formats. As a result, the 
invention is not limited to any particular set of data 
fields presented to the user, nor to the format used to 

30 present such data to the user. 
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Patient Care Education Delivery 

One example showing how patient care instructions 
are delivered to a patient is described with reference 
to FIGS. 5A-5C and 6A-6D. 
5 Suppose a patient, Mr. Patient, is being treated 

by Dr. Johnson, an ophthalmologist, for diabetic 
retinopathy. At the conclusion of an examination, Dr. 
Johnson enters the exam findings into a computer using 
the interface shown in FIG. 5A. A computer program 

10 running on Dr. Johnson's computer then combines the 
exam findings and Mr. Patient's existing medical 
information (Fig. 5B) . The combined information is 
shown in FIG. 5C. Next, the computer pirogram uses the 
combined information to generate customized educational 

15 materials. Finally, the computer program encrypts the 
customized educational materials using Dr. Johnson's 
unique encryption algorithm and key and sends the 
encrypted information to server computer 110 (Fig. 1) 
where the information is stored on database 270 (Fig. 

20 2B) . 

Encryption of the customized educational materials 
is necessary to protect the confidentiality of Mr. 
Patient's medical records. One way of encrypting the 
customized educational materials, such that no patient 

25 identifying information accompanies patient data 
transmission, is described below. First, server 
computer 110 stores an identification code associated 
with Mr. Patient (e.g., Mr. Patient's SSN) . The 
identification code is stored when Mr. Patient 

30 purchases or obtains client software having a support 
library (described above) . Sometime thereafter, Dr. 
Johnson's computer requests an identification code from 
server computer 110 that creates an association between 
Mr. Patient and the customized educational materials 
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that are to be sent by Dr. Johnson. To obtain the 
identification code from server 110, Dr. Johnson's 
computer generates a first random code (Rl) that is 
within a range of random numbers assigned to Dr. 
5 Johnson. Dr. Johnson's computer then sends Rl along 
with Mr. Patient's social security number (SSN) to 
server computer 110. Server computer 110 then checks 
to see if Mr. Patient's SSN is stored in database 270. 
If Mr. Patient's SSN is not found, server computer 110 

10 returns an error message to Dr. Johnson's computer. If 
Mr. Patient's SSN is found, server 110 generates a 
second random code (R2), stores an association between 
R2 and Mr. Patient's SSN, and returns Rl and R2 to Dr. 
Johnson's computer. The computer program on Dr. 

15 Johnson's computer can now send an encrypted version of 
Mr. Patient's customized educational materials along 
with R2 to server computer 110, and server computer 110 
will be able to associate R2 with Mr. Patient and Dr. 
Johnson. As a result, this process enables patient 

20 data to be sent without an identifying SSN. This 
process also verifies that the patient who is to 
receive the customized educational materials (e.g., Mr. 
Patient) has the library and decrypting software to 
decode the customized educational materials. 

25 Upon receipt of the encrypted version of Mr. 

Patient's customized set of references to educational 
materials and R2, server 110 decrypts the customized 
educational materials using a unique decryption 
algorithm associated with Dr. Johnson. Server 110 can 

30 determine the unique decryption algorithm associated 

with Dr. Johnson from R2. Server 110 then locates the 
unique encryption algorithm associated with Mr. Patient 
(using Mr. Patient's previously established relation 
with R2) , encrypts the customized educational 
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materials, stores the encrypted customized educational 
materials on database 270, and sends an email message 
to Mr. Patient. The email message indicates that the 
customized educational materials, derived from clinical 
findings and/or explicit instructions entered by Dr. 
Johnson, is now available on server computer 110, 

When Mr. Patient opens the email message he sees 
the message shown in PIG. 6A. If Mr. Patient clicks on 
"Doctor" symbol 610, a program running on Mr, Patient's 
client computer is invoked. The program then retrieves 
the encrypted data from server computer 110, decrypts 
the encrypted data , processes the data using the 
support library, and then presents a graphical display 
of the customized educational materials on Mr. 
Patient's computer screen as shown in FIG. 6B. The 
customized educational material of Fig. 6B includes 
both textual instructions 610 and graphical 
illustrations 620. 

After each subsequent exam, the actions described 
above are performed and Mr. Patient receives an email 
with the message shown in FIG. 6C. The email message 
of FIG. 6C also includes both text 630 and graphics 
640n (where n = A, B, C, etc.). 

Mr. Patient is subsequently treated. After the 
treatment, Dr. Johnson enters new information into his 
database. New customized educational material is 
created, the encryption scheme takes place, and an 
email is sent to Mr. Patient all as described above. 
Upon opening the email message the day after the 
procedure takes place, Mr. Patient would see the 
message shown in FIG. 6D. Fig. 6D also comprises both 
textual information 650 and graphical information 660n. 
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Confidential Directed Advertising 

Advertising represents a significant source of 
revenue for websites. In particular, websites that 
attract visitors interested in subjects covered by the 
5 website are more likely to be interested in goods 
and/or services related to those subjects. As a 
result, advertisers tend to direct their ads to 
websites that deal with related subjects. However, 
confidentiality concerns render it undesirable and 

10 event potentially illegal to obtain personal medical 

information from users visiting a website. The present 
invention solves this problem by allowing advertisers 
to direct advertisements to patients without gaining 
access to the patients' confidential medical 

15 information. A confidential ad server computer acts as 
an intermediary between patients and advertisers. The 
confidential ad server communicates to the advertisers 
the subjects in which the user may potentially be 
interested, without revealing the patient's identity to 

20 the advertisers. The advertisers may, in turn, direct 
ads to the anonymous user through the confidential ad 
server . 

In accordance to an embodiment of the invention, 
advertisers use a programmatic interface to select a 

25 target audience by selecting a number of parameters 
such as: demographics (e.g., age, sex, race), 
diagnoses, taking certain drugs, having had certain 
medical events (e.g., emergency room visits). The 
advertiser parameter set is stored in a confidential 

30 advertiser server database along with the 

advertisements that the advertiser has selected for the 
target audience. The advertiser server then searches 
the database, finds all the patients who satisfy the 
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parameter set, and includes the advertisements in web 
pages to be displayed to the target audience. 

The advertiser server can also act as an 
intermediary between the person responding to the ' ad 
5 and the advertiser so that the responder can purchase 
the product without the advertiser knowing his/her 
identity. The advertiser server receives the purchase 
request, credit card number, and necessary purchaser 
information from the purchaser and stores these 

10 information in a database record. The advertiser 
server than forwards the purchase request to the 
advertiser using the server company name and payment 
information. The purchased items are sent from the 
advertiser to the server company. The server company 

15 then refers to the database association record and then 
sends the items along to the purchaser after charging 
the purchaser's credit card for the cost of the entire 
transaction, plus an optional service fee. 

Similarly, when the prospective purchaser issues 

20 an information request, the server serves as an 
intermediary in the same way as it does with the 
transaction described above- so that confidentiality is 
preserved- 

Other Applications - Technical Support 

25 Another application for the present invention is 

an interactive technical support system. A customized 
technical support system 700, in accordance with an 
embodiment of the present invention is shown in Fig. 7. 
Customized technical support system 700 allows 

30 consumers to receive customized technical support 

through their computers. As shown in Fig. 7, consumer 
710 would contact the technical support center by 
telephone (POTS 730) . A technical support 
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representative 720 would then be able to send the 
consumer a command that identifies which technical 
instruction stored on a computer- readable storage 
medium 725 (e.g. a CD-ROM) distributed with the user's 
5 computer/appliance is to be displayed on computer 715. 
As a result, technical information customized to the 
consumer's actual problem is displayed. In the event 
that additional information has become available after 
the consumer acquired his computer /appliance, this 

10 information could be transmitted to the consumer 

together with the command specifying which information 
to present to the consumer. 

In addition, in the case of a computer system or 
other Internet -enabled device, the technical support 

15 representative would also be able to remotely connect 
to the computer/appliance and remotely run diagnostics 
to ascertain the consumer's problem. 

Encryption Schemes 

Several encryption schemes can be used in 

20 accordance with the principles of the invention. For 
example, patient information that originates from a 
primary care physician's (PCP) office may be encrypted 
using a unique physician encryption key, or it may be 
encrypted using one key that corresponds to the PCP and 

25 one key that corresponds to the patient. If the 

patient decides to change PCPs.at a certain point, a 
new key would be assigned to the new PCP, so that only 
the current PCP and the patient may have access to the 
patient information. 

30 Data that is sent to the patient from the server 

computer may be encrypted via a unique key and 
algorithm provided as part of a computer-readable 
storage medium so that only a specific patient who is 
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in possession of the computer- readable storage medium 
would be able to access the information stored on the 
disk and generate patient care educational materials by 
combining the patient' s information with the support 
5 library stored on the computer -readable object medium. 

Anonymous Web-Access 

As an added feature, the system of the present 
invention allows patients to access information over 
the Internet without disclosing their identities or 

10 risking inadvertent disclosure of confidential medical 
information using an anonymous ISP server 800, as shown 
in Fig. 8. To ensure patients' confidentiality, 
anonymous ISP server 800 allows users to anonymously 
access websites through the server. This is 

15 accomplished by routing packets through anonymous ISP 
server 800 and "masking" the IP address of the 
patient's computer. Thus, only the IP address (the 
"public" IP address) of anonymous ISP server 800 is 
visible to the outside world, while the IP address (the 

20 "private IP address") of patient's computer 810 is only 
visible to the anonymous ISP server 800. 

In one embodiment of the invention, the ISP 
maintains a pool of IP addresses. Whenever a URL 
request is received by the ISP, the anonymous ISP 

25 server replaces the IP address of the sender with an IP 
address from the anonymous ISP server's pool of IP 
addresses. The order of events is as follows. 

The user sends out a URL request via his browser. 
The request contains the requested URL and the IP 

30 address of the machine on which the browser is running. 
When the request arrives at the user's ISP server, the 
ISP replaces the IP address of the user with one of the 
IP addresses from the pool. The IP address of the 
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requesting machine and the replacement IP address are 
then associated in a database record in the ISP server 
database. The URL request then goes out to the 
Internet with the replacement IP address. When the 

5 requested page comes back to the ISP, a database search 
is performed that locates the record that associates 
the replacement IP address with the user's IP address. 
Next, the replacement IP address is removed and the 
requesting machine's IP address is inserted. Next, the 
10 associating database record is deleted. Finally, the 
requested page is sent to the requesting machine. 

Subsequent transmissions to and from the user' s 
machine are handled in a similar manner. As a result, 
the confidentiality of the user's machine IP address is 

15 preserved. 

Other Applications— Music Encryption 

It is important to note that the present invention 
is not limited to the secure transfer of patients' 
20 medical information. The present invention can be used 
for any application where information is securely 
distributed over a computer network. One such 
application, described below, is the distribution of 
music over the Internet. 
25 New digital encoding formats, such as MP3, allow 

music to be easily transferred/distributed over a 
computer network such as the Internet. The speed of 
this distribution channel presents an advantage over 
the conventional record store model where the same 
3 0 music can only be obtained by physically going to a 

music store, purchasing the music, and then taking it 
home to be played. Record companies and other 
distributors of sound recordings, however, are 
concerned about the relative ease with which music can 
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be downloaded onto a computer, copied and distributed . 
to others without compensating the owner of the music. 
Copyright law protects the owner of the music, but 
enforcement is difficult. As explained below with 
5 respect to Figs. 9A and 9B, the principles of the 

present invention can be used to address this problem. 

Suppose a consumer wants to purchase a record by 
downloading the record via the Internet. First, in 
stage 905, the consumer sends a request for purchase 

10 via the Internet to a server computer. The request for 
purchase includes an identification code e.g., the 
purchasing credit card number, or a unique machine id, 
or software identification code The server program 
associates the unique identification code with the 

15 consumer. The server then stores a record that 

includes a music identification code and the consumer' s 
identification code in stage 910. 

Using the stored codes, music can be protected 
from unauthorized play using either or both of the 

20 following methods. 

The simplest method for protecting the music from 
being mass copied does not require encryption. This 
method embeds the consumer's identification code and a 
tag in a portion of digital encoding of the sound 

25 recording that falls in the range of inaudible sounds 
when played by a CD player or any other device. A 
software program is then used to scan digitally encoded 
sound recordings distributed over the Internet for tags 
that identify purchasers. If a tag is found, the 

30 consumer's identification code is extracted and 

compared to the records stored in the database in stage 
910. If the consumer's identification code is found in 
the database and the music is being played or made 
available on the Internet without permission from the 
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music's owner, the consumer who purchased the music can 
be identified and prosecuted. 

The second method utilizes encryption. After the 
server computer receives the consumer's unique machine 
5 and/or software identification code, the music is 
encrypted. The server first generates an 
encryption/decryption algorithm that is unique to the 
consumer's machine and/or software identification 
codes. The music may then be compressed. After 
10 compression, the music is encrypted in stage 915 using 
the unique machine and/or software identification code. 
In some embodiments, the encryption is performed at a 
few select locations in the recording to reduce the 
amount of time required to decrypt the music. Since 
15 the music must be decrypted each time the music is 
played, limiting the amount of decryption necessary 
allows optimal playback on average and low-end computer 
systems. If someone were to listen to the music in its 
encrypted form, he/she would hear a large number (e.g., 
20 50) of. intermittent instances of static, each lasting 
1-2 seconds. The unique identification code is then 
embedded in the recording itself in stage 920. 
Optionally, the unique identification code may be 
embedded in the recording prior to compression, or 
25 after compression but prior to encryption. Finally, 
the music is downloaded to the consumer's computer in 
stages 925 and 930. 

When the music player software/hardware on the 
consumer' s computer initiates the process of playing 
30 the song, it first extracts the embedded identification 
code in stage 935. Stage 940 then compares the 
extracted identification code with the unique machine 
and/or software identification code embedded in the 
consumer's music player software/hardware. If the 
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identification codes are the same, the music player 
proceeds to decrypting (stage 955) and playing (stage 
960) the recording. If the identification codes are 
not the same, the music player may issue a prompt in 
5 stage 945 to the consumer to input the unique machine 
and/or software identification code that is embedded in 
the music. If the consumer is unable to enter that 
identification code, the music player will not play the 
music. 

10 If the identification codes match, the music 

player selects the decryption algorithm referenced by 
the identification code number from the music player's 
database. This decryption algorithm mirrors the 
encryption algorithm that is stored on the server and 

15 referenced by the same unique machine and/or software 
identification code. The music player then decrypts 
(stage 955) the music with that algorithm. The music 
is then optionally decompressed. 

Once decrypted and decompressed, the music is 

20 played (stage 960) . The only difference between this 
music and a previously unencrypted music is that this 
music data will contain the embedded identification 
code . 

In the method that employs encryption, it is 
25 important to note that consumers expect to be able to 
play purchased music on a number of devices that they 
own (e.g., home stereo, home computer, car stereo). 
However, each of these players will have a unique 
machine and/or software identification code number. 
30 Thus there must be a way of enabling the music to be 
played on devices other than the particular one that 
the music was ordered on. This is accomplished by 
prompting the consumer for a unique identification code 
when the identification code embedded in the music does 
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not match the unique identification code embedded in 
the player. Once the consumer enters the original 
music player's unique identification code, the software 
will play the music. The unique identification code 
5 can then be stored on. the player or player database so 
the consumer does not have to be prompted each time 
he/she wants to play the music. 

Conclusion 

Embodiments described above illustrate but do not 

10 limit the invention. While a patient education 
delivery example has been discussed above, the 
invention is in no way limited to delivery of patient 
educational information. Those skilled in the art will 
readily realize that the system and method of the 

15 present invention can be used to deliver information 
other than patient education. For example, software 
and hardware failure diagnosis and repair information 
may be distributed in computer-readable storage medium 
form. When a computer user experiences technical 

20 problems, he/she may contact the manufacturer's 

technical support center to request help in diagnosing 
and repairing the computer failure. The technical 
support center could then access the support library on 
the computer-readable storage medium to generate 

25 . educational materials customized to address the user's 
particular problem. As a result, the present invention 
is suitable for any application that requires on-line 
delivery of customized educational content to users. In 
addition, the present invention is especially useful in 

30 the cases where confidentiality of the transmitted data 
is essential - e.g., in communication of medical 
information. 
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CLAIMS 

We claim: 

1. A computer system for delivering user 
education, the computer system comprising: 
5 a server computer connected to a global-area 

computer network; and 

a server computer program executed by the 
server computer, wherein the server computer 
program comprises computer instructions for: 
10 receiving a request from a client 

computer over the global -area computer 
network, the request including data 
identifying a user; 

retrieving a list of educational 
15 information based on the request received 

from the client computer; and 

transmitting the retrieved list of 
educational information to the client 
computer over the global - area computer 
20 network, 

wherein the client computer executes a client 
computer program and the client computer program 
comprises computer instructions for: 

graphically presenting educational 
25 information based on the list received from 

the server computer over the global -area 
computer network to the user; and 

requesting user-specific information 
from the server computer for the user. 

30 

2. The computer system of claim 1, wherein the 
information presented by the client computer to the 
user includes: 
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graphical animations of the educational 
inf ormat ion ; and 

textual educational materials. 

5 3. The computer system of claim 1, wherein the 

user-specific information is encrypted using a unique 
key and algorithm for that user. 

4. The computer system of claim 1, further 
10 comprising a computer- readable storage medium, the 

computer- readable storage medium comprising a library 
of educational information. 

5. The computer system of claim 4, wherein the 
15 computer-readable storage medium further comprises a 

unique algorithm and a unique key identifying a user. 

6. The computer system of claim 5, wherein 
copies of the unique algorithm and the unique key are 

20 stored on the server computer - 

7. The computer system of claim 1, wherein the 
client computer program further comprises computer 
instructions for displaying advertisements based on 

25 user-specific information. 

8. The computer system of claim 1, wherein the 
client computer program further comprises computer 
instructions for displaying links to third party 

30 service providers / based on user-specific information. 

9. A method of delivering user education over a 
computer system comprising a server computer connected 
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to a client computer over a global-area computer 
network, the method comprising: 

receiving on the server computer a request 
from the client computer over the global -area 
5 computer network, the request including data 

identifying a user; 

retrieving a list of educational information 
based on the request received from the client 
computer; and 
10 transmitting the retrieved list of 

educational information to the client computer 
over the global -area computer network, 

wherein the educational information is 
graphically presented to the user on the client 
15 computer based on the list received from the 

server computer over the global -area computer 
network. 



10. The method of claim 9, wherein the 
20 information presented to the user includes: 

graphical animations of the educational 
information; and 

textual educational materials. 

25 11. The method of claim 9, wherein the list of 

educational information is encrypted using a unique key 
and algorithm for that user. 

12. The method of claim 1, wherein the client 
3 0 computer further comprises a computer -readable storage 
medium storing a library of educational information. 
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13. The method of claim 12, wherein the computer- 
readable storage medium further comprises a unique 
algorithm and a unique key identifying the user. 

5 14. The method of claim 13, wherein copies of the 

unique algorithm and the unique key are stored on the 
server computer. 

15. The method of claim 9, further comprising 
10 displaying advertisements based on user-specific 

information. 

16. The method of claim 9, further comprising 
displaying links to third party service providers, 

15 based on user-specific information. 

17. A computer- readable storage medium comprising 
a library of educational information for use in a 
computer system for delivering user education, the 

20 computer system comprising a server computer connected 
to a client computer over a global -area computer 
network, wherein the server computer comprises computer 
instructions for: 

receiving a request from the client computer 
25 over the global -area computer network, the request 

including data identifying a user; 

retrieving a list of educational information 
based on the request received from the client 
c omput er ; and 
30 transmitting the retrieved list of 

educational information to the client computer 
over the global -area computer network, 

wherein the client computer comprises 
computer instructions for graphically presenting 
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the educational information to the user based on 
the list received from the server computer over 
the global -area computer network. 

5 18. The computer- readable storage medium of claim 

17, wherein the information presented by the client 
computer to the user includes: 

graphical animations of the educational 
information; and 
10 textual educational materials. 

19. The computer-readable storage medium of claim 
17 , wherein the list of educational information is 
encrypted using a unique key and algorithm for that 

15 user. 

20. The computer-readable storage medium of claim 
19 , further comprising a unique algorithm and a unique 
key identifying the user. 

20 

21- The computer -readable storage medium of claim 
20 # wherein copies of the unique algorithm and the 
unique key are stored on the server computer. 

25 22. The computer-readable storage medium of claim 

17, wherein the client computer further comprises 
computer instructions for displaying advertisements 
based on user-specific information. 

30 23. The computer- readable storage medium of claim 

17, wherein the client computer further comprises 
computer instructions for displaying links to third 
party service providers, based on user-specific 
information. 
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24 ♦ A computer system for delivering patient care 
education, the computer system comprising: 

a server computer connected to a global -area 
computer network; and 

a server computer program executed by the 
server computer, wherein the server computer 
program comprises computer instructions for: 
receiving a request from a client 

computer over the global -area computer 

network, the request including patient 

information; 

retrieving a list of patient care 

information concerning a patient based on the 

request received from the client computer; 

and 

transmitting the retrieved list of 
patient care information to the client 
computer over the global -area computer 
network, 

wherein the client computer executes a client 
computer program and the client computer program 
comprises computer instructions for: 

graphically presenting patient care 
information to a user of the client computer 
based on the list of patient care information 
received from the server computer over the 
global -area computer network; and 

requesting patient care information from 
the server computer for the patient based on 
the patient's medical data. 
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25. The computer system of claim 24, wherein the 
information presented by the client computer to the 
user includes : 

graphical animations of patient care 
5 information; and 

textual patient care information. 

26. The computer system of claim 24 , wherein the 
patient information is encrypted using a unique key and 

10 algorithm for that patient. 

27. The computer system of claim 26, wherein the 
server computer program further includes computer 
instructions for: 

15 receiving patient care information generated 

by a physician and encrypted using a physician's 
key; 

decrypting the patient care information 
received from the physician; and 
20 re-encrypting the patient care information 

using the patient key. 

28. The computer system of claim 27, wherein the 
client computer program further comprises computer 

25 instructions for decrypting the patient care 
information. 

29. The computer system of claim 24, wherein the 
client computer further comprises a computer -readable 

30 storage medium storing: 

a library of patient care information; and 
a unique algorithm and a unique key 
identifying the patient . 
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30. The computer system of claim 29, wherein 
copies of the unique algorithm and the unique key are 
stored on the server computer. 



5 31. The computer system of claim 30, wherein the 

client computer program further includes computer 
instructions for: 

selecting a primary care physician; and 
assigning decryption keys based on the 
10 selected primary care physician. 



32. The computer system of claim 31 , wherein the 
client computer program further comprises computer 
instructions for: 

15 selecting a new primary care physician; and 

changing decryption key assignments based on 
the selection of the new primary care physician. 

33. The computer system of claim 24 , wherein the 
20 global-area computer network is the Internet. 

34. The computer system of claim 24, wherein the 
client computer program further comprises computer 
instructions for displaying advertisements based on the 

25 patient information. 



35. The computer system of claim 34, wherein the 
server computer program further comprises computer 
instructions for: 
30 allowing an advertiser to select sets of 

medical conditions associated with an 

advert i sement ; and 
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selecting one or more advertisements for 
display to a patient based on the patient 
information. 

5 36. The computer system of claim 24 , wherein the 

client computer program further comprises computer 
instructions for displaying links to third party 
service providers, based on the patient information. 



10 37. A method of delivering patient care education 

on a computer system comprising a server computer and a 
client computer connected via a global -area computer 
network, the method comprising: 

receiving a request from a client computer 
15 over the global -area computer network, the request 

including patient information; 

retrieving a list of patient care information 
concerning a patient based on the request received 
from the client computer; and 
20 transmitting the retrieved list of patient 

care information to the client computer over the 
global -area computer network. 

38. The method of claim 37 , further comprising 
25 graphically presenting patient care information to a 
user of the client computer based on the list of 
patient care information received from the server 
computer over the global -area computer network, wherein 
the patient care information presented by the client 
30 computer to the user includes: 

graphical animations of patient care 
information; and 

textual patient care information. 
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39. The method of claim 37, wherein the user- 
specific information is encrypted using a unique key 
and algorithm for that patient. 

5 40. The method of claim 39, further comprising: 

receiving a list of patient care information 
generated by a physician and encrypted using the 
physician' s key; 

decrypting the list of patient care 
10 information received from the physician; and 

re-encrypting the list of patient care 
information using the patient key. 



41 • The method of claim 37, further comprising 
15 decrypting the patient care information. 

42. The method of claim 37, wherein the client 
computer further comprises a computer- readable storage 
medium storing: 

20 a library of patient care information; and 

a unique algorithm and a unique key 
identifying a patient. 

43. The method of claim 42, further comprising 
25 storing copies of the unique algorithm and the unique 

key on' the server computer. 

44. The method of claim 43, further comprising: 
in response to a user selecting a primary 

30 care physician, assigning decryption keys based on 

the selected primary care physician. 

45. The method of claim 44, further comprising: 
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in response to the user selecting a new 
primary care physician, changing decryption key 
assignments based on the selection of the new 
primary care physician. 

5 

46. The method of claim 37, wherein the global - 
area computer network is the Internet . 

47. The method of claim 37, further comprising 
10 displaying advertisements based on user-specific 

information. 



48. The method of claim 47, further comprising: 
allowing an advertiser to select sets of 

15 medical conditions associated with an 

adve r t i s ement ; and 

selecting one or more advertisements for 
display to a patient based on user- speci tic 
information. 

20 

49. The method of claim 37 , further comprising 
displaying links to third party service providers, 
based on user-specific information. 

25 50. A computer-readable storage medium comprising 

a library of patient care information for use in a 
computer system for delivering patient care education, 
the computer system comprising a server computer and 
one or more client computers connected via a global - 
3 0 area computer network, wherein the server computer 
comprises computer instructions for: 

receiving a request from a client computer 
over the global -area computer network, the request 
including patient information; 
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retrieving a list of patient care information 
concerning a patient based on the request received 
from the client computer; and 

transmitting the retrieved list of patient 
5 care information to the client computer over the 

global -area computer network, 

wherein the client computer includes computer 
instructions for graphically presenting patient 
care information to a user based on the 
10 information received from the server computer over 

the global -area computer network. 

51. The computer- readable storage medium of claim 
50 , wherein the patient care information presented by 
15 the client computer to the user includes: 

graphical animations of patient care 
inf ormat ion ; and 

textual patient care information. 

20 52. The computer- readable storage medium of claim 

50 , wherein the list of patient care information is 
encrypted using a unique key and algorithm for that 
patient. 

25 53. The computer- readable storage medium of claim 

52, wherein the server computer further comprises 
computer instructions for: 

receiving a list of patient care information 
generated by a physician and encrypted using a 
30 physician's key; 

decrypting the list of patient care 
information received from the physician; and 

re-encrypting the list of patient care 
information using the patient key. 
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54. The computer -readable storage medium of claim 
53, wherein the client computer further comprises 
computer instructions for decrypting the patient care 
5 information. 



10 



55. The computer -readable storage medium of claim 
50, further containing a unique algorithm and a unique 
key identifying a patient. 

56. The computer- readable storage medium of claim 
55, wherein copies of the unique algorithm and the 
unique key are stored on the server computer. 



15 57. The computer -readable storage medium of claim 

56, wherein the client computer further comprises 
computer instructions for: 

allowing the patient to select a primary care 
physician; and 
20 assigning decryption keys based on the 

selected primary care physician. 



58. The computer- readable storage medium of claim 
57, wherein the client computer further comprises 

25 computer instructions for: 

allowing the patient to select a new primary 
care physician; and 

changing decryption key assignments based on 
the selection of the new primary care physician. 

30 

59. The computer- readable storage medium of claim 
50, wherein the global -area computer network is the 
Internet . 
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60. The computer- readable storage medium of claim 
50, wherein the client computer further comprises 
computer instructions for displaying advertisements 
based on the patient information, 

61. The computer- readable storage medium of claim 
50, wherein the server computer program further 
comprises computer instructions for: 

allowing an advertiser to select sets of 
medical conditions associated with an 
advert i sement ; and 

selecting one or more advertisements for 
display to a patient based on the patient 
information. 

62. The computer- readable storage medium of claim 
50, wherein the client computer further comprises 
computer instructions for displaying links to third 
party service providers, based on the patient 
information, 

63. A computer system for delivering digitally 
encoded sound recordings, the computer system 
comprising: 

a server computer connected to a global -area 
computer network; and 

a server computer program executed by the 
server computer, wherein the server computer 
program comprises computer instructions for: 
0 receiving a request from a client 

computer over the global -area computer 
network, the request including data 
identifying a user; 
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retrieving digitally encoded sound 
recordings based on the request received from 
the client computer; and 

transmitting the retrieved digitally 
5 encoded sound recordings to the client 

computer over the global -area computer 
network; 

wherein the client computer executes a client 
computer program and the client computer program 
10 comprises computer instructions for: 

playing the digitally encoded sound 
recordings received from the server computer 
over the global -area computer network to the 
user; and 

15 requesting digitally encoded sound 

recordings from the server computer for the 
user. 



64 . The computer system of claim 63 , wherein the 
20 digitally encoded sound recordings are encrypted using 

a unique key and algorithm for that user. 

65. The computer system of claim 63, wherein the 
client computer program further comprises computer 

25 instructions for decrypting the digitally encoded sound 
recordings . 

66. The computer system of claim 63, wherein the 
client computer further comprises a computer-readable 

3 0 storage medium containing a unique algorithm and a 
unique key identifying the user. 
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67. The computer system of claim 66, wherein 
copies of the unique algorithm and the unique key are 
stored on the server computer. 



5 68. The computer system of claim 62, wherein the 

global-area computer network is the Internet. 

69 . The computer system of claim 63 , wherein the 
client computer program further comprises computer 
10 instructions for displaying advertisements based on the 
user's musical preferences. 



70- The computer system of claim 69, wherein the 
server computer program further comprises computer 
15 instructions for: 

allowing an advertiser to select sets of 
digitally encoded sound recordings associated with 
an advertisement; and 

selecting one or more advertisements for 
20 display to the user based on the user's musical 

preferences. 



71. The computer system of claim 63, wherein the 
client computer program further comprises computer 
25 instructions for displaying links to third party 
service providers, based on the user's musical 
preferences . 



72. The computer system of claim 63, wherein the 
30 server computer program further comprises computer 

instructions for embedding data identifying the user in 
the digitally encoded sound recordings. 
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73. " The computer system of claim 72, wherein the 
data identifying the user is embedded in a non-audible 
range of the digitally encoded sound recordings. 

5 74. A method for delivering digitally encoded 

sound recordings on a computer system comprising a 
server computer and a client computer connected via a 
global -area computer network, the method comprising the 
server computer: 
L0 receiving a request from the client computer 

over the global -area computer network, the request 
including data identifying a user; 

retrieving digitally encoded sound recordings 
based on the request received from the client 
1 5 computer ; and 

transmitting the retrieved digitally encoded 
3 — t-vio r-l-i^nt- nomouter over the 

DUU11U — 

global -area computer network, 

wherein the client computer plays the 
20 digitally encoded sound recordings received from 

the server computer over the global-area computer 
network to the user. 

75. The method of claim 74, wherein the digitally 
25 encoded sound recordings are encrypted using a unique 

key and algorithm for that user. 

76. The method of claim 74, wherein the client 
computer further decrypts the digitally encoded sound 

30 recordings. 

77. The method of claim 74, wherein the client 
computer further comprises a computer- readable storage 
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medium containing a unique algorithm and a unique key- 
identifying the user. 

78. The method of claim 77, wherein copies of the 
5 unique algorithm and the unique key are stored on the 

server computer. 

79. The method of claim 74, wherein the global- 
area computer network is the Internet. 

10 

80. The method of claim 74, wherein the client 
computer further displays advertisements based on the 
user's musical preferences. 

15 81. The method of claim 80, wherein the server 

computer further: 

allows an advertiser to select sets of 
digitally encoded sound recordings associated with 
an advertisement; and 
20 selects one or more advertisements for 

display to the user based on the user's musical 
preferences. 

82. The method of claim 74, wherein the client 
25 computer further displays links to third party service 

providers, based on the user's musical preferences, 

83. The method of claim 74, wherein the server 
computer further embeds data identifying the user in 

30 the digitally encoded sound recordings. 

84. The method of claim 83, wherein the data 
identifying the user is embedded in a non-audible range 
of the digitally encoded sound recordings. 
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85. A computer-readable storage medium comprising 
a unique algorithm and a unique key identifying a user 
for use in a computer system for transferring digitally 
5 encoded sound recordings, the computer system 

comprising a server computer and one or more client 
computers connected via a global -area computer network, 
wherein the server computer comprises computer 
instructions for: 
10 receiving a request from the client computer 

over the global -area computer network, the request 
including data identifying a user; 

retrieving digitally encoded sound recordings 
based on the request received from the client 
1 5 comput er ; and 

transmitting the retrieved digitally encoded 
sound recordings to the client computer over the 
global -area computer network; 

wherein the client computer comprises 
20 computer instructions for playing the digitally 

encoded sound recordings received from the server 
computer over the global -area computer network to 
the user. 

25 86. The computer-readable storage medium of claim 

85, wherein the digitally encoded sound recordings are 
encrypted using a unique key and algorithm for that 
user. 

30 87. The computer-readable storage medium of claim 

85, wherein the client computer further comprises 
computer instructions for decrypting the digitally 
encoded sound recordings. 
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88. The computer- readable storage medium of claim 
85, wherein copies of the unique algorithm and the 
unique key are stored on the server computer. 

89. The computer- readable storage medium of claim 
85, wherein the global-area computer network is the 
Internet . 



90 . The computer-readable storage medium of claim 
10 85, wherein the client computer further comprises 
computer instructions for displaying advertisements 
based on the user's musical preferences. 



91. The computer -readable storage medium of claim 
15 90, wherein the server computer further comprises 
computer instructions for: 

allowing an advertiser to select sets of 
digitally encoded sound recordings associated with 
an advertisement; and 
20 selecting one or more advertisements for 

display to the user based on the user' s musical 
preferences. 



92. The computer- readable storage medium of claim 
25 85, wherein the client computer further comprises 

computer instructions for displaying links to third 
party service providers , based on the user's musical 
preferences . 



30 93 . The computer -readable storage medium of claim 

85, wherein the server computer further comprises 
computer instructions for embedding data identifying 
the user in the digitally encoded sound recordings. 
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94. The computer- readable storage medium of claim 
93, wherein the data identifying the user is embedded • 
in a portion of the digitally encoded sound recordings 
that falls in a non-audible range when the digitally 

5 encoded sound recordings are played. 

95. An anonymous ISP system comprising: 

a server computer connected to at least one client 
computer via a global -area computer network; and 
10 a computer program executed by the server 

computer, the computer program comprising computer 

instructions for: 

receiving information from a client computer, 
wherein the information received from the client 
15 computer includes a private IP address for the 

client computer; 

replacinq the private IP address for the 
client computer with a public IP address for the 
client computer; and 
2o transmitting over the global-area computer 

network the information received from the client 
computer with the public IP address to another 
computer. 

25 96. The system of claim 95, wherein the 

information received from the client computer includes 
a request for medical information related to a 
patient's medical condition. 

30 97. A method of providing an anonymous ISP system 

comprising a server computer and a client computer 
connected via a global -area network, the method 
comprising the server computer: 
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receiving information from the client 
computer, wherein the information received from 
the client computer includes a private IP address 
for the client computer; 
5 replacing the private IP address for the 

client computer with a public IP address for the 
client computer; and 

transmitting over the global -area computer 
network the information received from the client 
10 computer with the public IP address to another 

computer . 



98. The method of claim 97, wherein the 
information received from the client computer includes 
15 a request for medical information related to a 
patient's medical condition. 



99. A computer system for providing customized 
technical support, the computer system comprising: 
20 a server computer connected to a global -area 

computer network; and 

a server computer program executed by the 
server computer, wherein the server computer 
program comprises computer instructions for: 
25 receiving information describing a 

technical support request from a consumer; 

generating a list of educational 
materials related to the consumer's technical 
support request; and 
30 transmitting the list of educational 

materials to a client computer operated by 
the consumer over a global -area network. 
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100. The computer system of claim 99, wherein the 
educational materials are stored on a computer- readable 
storage medium on the client computer. 

5 101. The computer system of claim -99, wherein the 

global-area network is the Internet. 

102. The computer system of claim 99, wherein the 
server computer program further comprises computer 

10 instructions for: 

generating a list of diagnostic tests based 
on the consumer's technical support request; 

transmitting the list of diagnostic tests to 
the client computer; and 
15 receiving the results of the diagnostic tests 

performed on the client computer. 

103 . A method for providing customized technical 
support on a computer system comprising a server 

20 computer and a client computer connected via a global - 
area computer network, the method comprising the server 
computer : 

receiving information describing a technical 
support request from a consumer; 
25 generating a list of educational materials 

related to the consumer's technical support 
request ; and 

transmitting the list of educational 
materials to the client computer operated by the 
30 consumer over a global-area network. 

. 104. The method of claim 103, wherein the 
educational materials are stored on a computer- readable 
storage medium on the client computer. 
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105. The method of claim 103, wherein the global- 
area network is the Internet. 

5 106. The method of claim 103, further comprising: 

generating a list of diagnostic tests based 
on the consumer's technical support request; 

transmitting the list of diagnostic tests to 
the client computer; and 
10 receiving the results of the diagnostic tests 

performed on the client computer . 

107. A computer-readable storage medium for use in 
a computer- system for providing customized technical 
15 support, the computer system comprising a server 

computer and a client computer connected via a global- 
area comp"ter network., wherein the server computer 
comprises computer instructions for: 

receiving information describing a technical 
20 support request from a consumer; and 

generating a list of educational materials 
related to the consumer's technical support 
request; and 

transmitting the list of educational 
25 materials to a client computer operated by the 

consumer over a global -area network. 

108. The computer -readable storage medium of claim 
107, wherein the global-area network is the Internet. 

30 

109. The computer- readable storage medium of claim 
107, wherein the server computer further comprises 
computer instructions for: 
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generating a list of diagnostic tests based 
on the consumer's technical support requests- 
transmitting the list of diagnostic tests to 
the client computer; and 
5 receiving the results of the diagnostic tests 

performed on the client computer. 
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Existing Diagnosis: Type 2 Diabetes 
Existing Diagnosis: Diabetic Retinopathy 
Primary Care Provider: Dr. Brodie 



Existing Diagnosis: Type 2 Diabetes 
Existing Diagnosis: Diabetic Retinopathy 
Primary Care Provider: Dr. Brodie 
Exam Findings: No diabetic changes 
New Diagnoses: None 



Existing Diagnosis: Type 2 Diabetes 
Existing Diagnosis: Diabetic Retinopathy 
Primary Care Provider: Dr. Brodie 
Exam Findings: No diabetic changes 



Procedure to Done: fluorescein angiogram. 
Procedure Date/Time: February 16, 2000 at 2:00 p.m 



Dear Mr. Burke, 

I wanted to reinforce a few aspects of your visit 
with me today: Please click on the 'Doctor* symbol 
to view the information I would like you to see. 



Fig. 5A 



Fig. 5B 



New Diagnoses: Macular edema 



Fig. 5C 
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Fig. 6A 



6/11 



PCT/US01/41432 

WO 02/07591 



Your eyes look excellent with no evid nee of any 
diabetic changes. 



2. (t is important to maintain close 
follow-up on an annual basis so we 
can detect early changes if they 
should appear. More often than not, 
I will pick up early diabetic changes 
in the retina before you are aware of 
them. If we were to observe early 
changes in the retina! I would begin 
seeing you on a more frequent 
basis, for example every 6 months. 



Show graphic of 
patient reading eye 
chart with 20/20 line 

highlighted; then 
show early diabetic 
changes in retina . 



3. In addition to your annual eye exam, there are other 
important things you can do to prevent diabetic eye 
changes. These include: r 

a. Controlling blood sugar 

b. Controlling blood pressure 

c. Controlling blood cholesterol 

d. Stopping cigarette smoking 

Please discuss these matters with your primary care 
provider (Dr. Brodie). 

I look forward to seeing you next year. Please call my 
office earlier if you have any visual problems. 

Dr. Ben Johnson 



Fig. 6B 
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Dear Mr. Burke, 

As we discussed at your appointment today, you have developed eye 
changes from diabetes that will require laser treatment Diabetes has 
affected the small blood vessels in the central portion of your retina 
(macula), making them abnormally leaky. As fluid leaks from these vessels, 
the macula become swollen ("macular edema"), just like a sponge. 



Show retina with macular 
edema. Demonstrate 
dynamically how retina 
swells with leaky vessels. 



Show normal retina and 
vessels with macula labeled. 
Show normal blood flow 
without leakage in normal 

retina . 



Fortunately, because you have been carefully monitored for the past few 
years, we are treating the leakage before it has caused visual loss. Before we 
can treat the leaking blood vessels we have to identify them by doing a 
fluorescein angiogram. This consists of injecting a dye into your arm vein 
and then photographing your eye as it goes through the blood vessels in the 
retina. The procedure takes about 20 minutes and does not hurt ^ 



Show fluorescein angiographic 
procedure (injection of dye with patient 
sitting at camera) and sample study 

nhmtnc 



Once we identity the abnormally leaky vessels with the fluorescein 
angiogram, we will use this as a map to guide the laser treatment Each of 
the leaky vessels will be treated with one or more spots of laser to 
'cauterize" it and stop the leakage. 



^3o 



Show surgeon and patient seated at 
laser, while surgeon looks at projected 
angiogram. 



The treatment is done in my office and requires no special anesthesia. Other 
than the bright laser flashes, there is no pain or discomfort The entire 
treatment takes about 1 5-30 minutes. Afterwards, you can resume all normal 
activities without restriction. 



For the first few weeks after treatment, sometimes the vision is a little worse, 
but it gradually improves and hopefully remains stable. The goal of this 
treatment is to stabilize, rather than improve vision. Left untreated the 
macular edema causes progressive deterioration of vision. Laser treatment 
often arrests this deterioration, preserving your vision. 

Your angiogram is scheduled for Monday, February 16, 2000 at 2:00 p.m. 
Please call me if you have any questions. 

Dr. Ben Johnson 



Fig. 6C 
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Dear Mr. Burke, 



/ 



6iQ 



Your laser treatment went very well today. We were able to treat the 
leaking blood vessels as we planned. Your vision will probably be a little 
blurry for the next few weeks. 



Show graphic of central visual 
blurring and metamorphopsia 



This is very common after laser. It should improve after then and come 
back to "baseline". As we discussed, laser treatment prevents visual 
deterioration rather than improving vision. 

I will see you back again in 3 months. At that time, we will evaluate your 
response to laser. 



Show graphic of re-examining 
retina, with resolution of 
edema. 



If the macular edema is resolved, we will continue to follow your every 3 
4 months. If it persists, we will obtain another fluorescein angiogram 
and consider additional laser treatment Sometimes, K takes 3 or more 
laser treatments to make the macular edema resolve. 

In the interim, please make all efforts to control your blood sugar, 
hypertension, and cholesterol. These abnormalities can all contribute to 
worsening of the macular edema. 

Please call me if you have any questions. 

Dr. Ben Johnson 



Fig. 6D 
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